AWS kms documentation change
Summary
Updated import key material example with new fields (importType, keyMaterialDescription) and TLS details
Security assessment
Adds documentation about key material import metadata and secure TLS connections, improving operational security awareness.
Diff
diff --git a/kms/latest/developerguide/ct-importkeymaterial.md b/kms/latest/developerguide/ct-importkeymaterial.md index 1ecb9ecde..647bd20c3 100644 --- a//kms/latest/developerguide/ct-importkeymaterial.md +++ b//kms/latest/developerguide/ct-importkeymaterial.md @@ -13 +13 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc - "eventVersion": "1.05", + "eventVersion": "1.11", @@ -22 +22 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc - "eventTime": "2020-07-26T00:08:00Z", + "eventTime": "2025-05-21T05:42:31Z", @@ -30,2 +30,4 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc - "validTo": "Jan 1, 2021 8:00:00 PM", - "expirationModel": "KEY_MATERIAL_EXPIRES" + "validTo": "May 21, 2025, 5:47:45 AM", + "expirationModel": "KEY_MATERIAL_EXPIRES", + "importType": "NEW_KEY_MATERIAL", + "keyMaterialDescription": "ExampleKeyMaterialA" @@ -34 +36,2 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc - "keyId":"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" + "keyId":"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab", + "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0" @@ -46,0 +50 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc + "managementEvent": true, @@ -47,0 +52,6 @@ CloudTrail log entries for this operation recorded on or after December 2022 inc + "eventCategory": "Management", + "tlsDetails": { + "tlsVersion": "TLSv1.3", + "cipherSuite": "TLS_AES_256_GCM_SHA384", + "clientProvidedHostHeader": "kms.us-west-2.amazonaws.com" + }